Overview

overview

10

Static

static

3

2e62625a71...18.exe

windows7-x64

10

2e62625a71...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2e62625a71d75554eba6d7e6cfcee465_JaffaCakes118

  • Size

    58KB

  • Sample

    240709-avg6mawhqm

  • MD5

    2e62625a71d75554eba6d7e6cfcee465

  • SHA1

    b624631c5c1f3c88322b2c88c6779a971f2509a1

  • SHA256

    cf69d7ab7cf583575dbf368f0611e0a5c00b668b4339a31d9e7e7be78f0312d2

  • SHA512

    d47bc2692b36d33aa1538b8ab687ef49ad1e7d33f03392ab776d22877a7614c2e91a7a4cafb753ffeb2d8c0b9ecbfe1aecf93c3db27afe1e524950a4c8edbe73

  • SSDEEP

    384:eO/5BrfeNYgcXKpL2huro3D+Pn2EJQtxkGi5Q5aRPZF2EfBat33Nv9pJpJpE:eOxByN7tW+v2ESxkGyXRPZ3pa9dM

Score
10/10
evasionspywarestealerupx

Malware Config

Targets

    • Target

      2e62625a71d75554eba6d7e6cfcee465_JaffaCakes118

    • Size

      58KB

    • MD5

      2e62625a71d75554eba6d7e6cfcee465

    • SHA1

      b624631c5c1f3c88322b2c88c6779a971f2509a1

    • SHA256

      cf69d7ab7cf583575dbf368f0611e0a5c00b668b4339a31d9e7e7be78f0312d2

    • SHA512

      d47bc2692b36d33aa1538b8ab687ef49ad1e7d33f03392ab776d22877a7614c2e91a7a4cafb753ffeb2d8c0b9ecbfe1aecf93c3db27afe1e524950a4c8edbe73

    • SSDEEP

      384:eO/5BrfeNYgcXKpL2huro3D+Pn2EJQtxkGi5Q5aRPZF2EfBat33Nv9pJpJpE:eOxByN7tW+v2ESxkGyXRPZ3pa9dM

    Score
    10/10
    evasionspywarestealerupx

    • Modifies firewall policy service

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks